Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ac32eee1-10f7-457d-a8c5-5f7f741a63da/0/3130332e3136382e3135302e302f32332d3233203d3e20313432333131.roa
File:                     3130332e3136382e3135302e302f32332d3233203d3e20313432333131.roa (raw, json)
Hash identifier:          1brkkWl75htTEfAI/3ts1YDKKbMJKStBanZMqFbINmc=
Subject key identifier:   92:5F:D4:85:04:9E:03:0D:91:E0:FF:14:70:35:C2:97:F3:EE:1D:E3
Certificate issuer:       /CN=7195906BF48238F96B0510D75000910A519133F7
Certificate serial:       5AF4CE224E9440DBF183D8435778A362D0EF5E8F
Authority key identifier: 71:95:90:6B:F4:82:38:F9:6B:05:10:D7:50:00:91:0A:51:91:33:F7
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7195906BF48238F96B0510D75000910A519133F7.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ac32eee1-10f7-457d-a8c5-5f7f741a63da/0/3130332e3136382e3135302e302f32332d3233203d3e20313432333131.roa
Signing time:             Tue 30 Jan 2024 07:01:57 +0000
ROA not before:           Tue 30 Jan 2024 06:56:57 +0000
ROA not after:            Tue 28 Jan 2025 07:01:57 +0000
asID:                     142311
IP address blocks:        103.168.150.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ac32eee1-10f7-457d-a8c5-5f7f741a63da/0/7195906BF48238F96B0510D75000910A519133F7.crl
                          rsync://repo-rpki.idnic.net/repo/ac32eee1-10f7-457d-a8c5-5f7f741a63da/0/7195906BF48238F96B0510D75000910A519133F7.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7195906BF48238F96B0510D75000910A519133F7.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 09 May 2024 08:11:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:f4:ce:22:4e:94:40:db:f1:83:d8:43:57:78:a3:62:d0:ef:5e:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7195906BF48238F96B0510D75000910A519133F7
        Validity
            Not Before: Jan 30 06:56:57 2024 GMT
            Not After : Jan 28 07:01:57 2025 GMT
        Subject: CN=925FD485049E030D91E0FF147035C297F3EE1DE3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:63:59:ed:a2:bd:29:32:cb:c6:6c:92:da:19:
                    83:0c:6a:11:a7:00:e1:d6:92:e1:c7:c7:bc:a6:47:
                    e6:e9:a2:e2:f4:95:90:99:a0:ec:92:0c:b8:ef:21:
                    f3:2a:ae:f3:bc:11:3c:f0:2b:82:5e:2e:4a:e1:44:
                    45:c3:be:c1:ff:c4:7e:ff:c4:31:6d:68:02:89:12:
                    86:83:87:62:82:37:a7:5f:02:44:e8:f1:61:ee:e4:
                    a4:30:e6:cb:69:18:b1:c5:1f:a7:f7:0b:06:74:8c:
                    90:6c:b7:02:fd:0c:22:77:40:21:da:fd:b3:7e:36:
                    b6:7e:a2:46:62:7c:c2:a8:ff:80:75:2e:f8:50:46:
                    d5:aa:3a:8a:2c:0e:52:52:1e:c6:25:40:e2:c8:e5:
                    79:c4:3e:e2:23:b3:15:50:ed:ed:2b:2c:11:59:b9:
                    70:10:d2:98:9f:39:7f:9c:b4:97:a8:c2:b6:94:a8:
                    31:2a:94:41:d1:d0:0f:2c:1f:48:b9:da:d9:85:30:
                    47:77:1c:30:f8:3e:c9:e4:40:ef:fd:9e:1a:f9:46:
                    be:bc:a7:12:69:d5:7a:21:1a:e6:e0:31:33:fb:cf:
                    04:79:f4:36:cb:50:5b:28:8c:ec:3b:c7:f6:57:e8:
                    c4:e4:6f:00:b9:3e:84:dc:10:02:5c:e6:c4:c4:02:
                    93:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:5F:D4:85:04:9E:03:0D:91:E0:FF:14:70:35:C2:97:F3:EE:1D:E3
            X509v3 Authority Key Identifier:
                keyid:71:95:90:6B:F4:82:38:F9:6B:05:10:D7:50:00:91:0A:51:91:33:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ac32eee1-10f7-457d-a8c5-5f7f741a63da/0/7195906BF48238F96B0510D75000910A519133F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7195906BF48238F96B0510D75000910A519133F7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ac32eee1-10f7-457d-a8c5-5f7f741a63da/0/3130332e3136382e3135302e302f32332d3233203d3e20313432333131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.168.150.0/23

    Signature Algorithm: sha256WithRSAEncryption
         86:8f:ba:6d:a7:b4:f7:47:a4:60:aa:03:3e:ca:48:6e:52:e2:
         b2:10:22:91:28:19:61:e5:bc:25:01:5e:31:f5:84:b8:e9:ec:
         84:b6:90:bc:19:81:9d:49:bb:e9:d4:e0:20:a4:a5:e7:01:fb:
         81:b5:21:50:b8:5e:2b:a8:62:8d:62:e6:3d:f1:11:34:86:a9:
         0f:0b:4d:ee:7f:57:23:6f:fb:77:f2:7a:8a:d4:73:e9:dc:c4:
         8b:fc:e4:69:11:65:ab:f8:b1:85:df:33:24:91:44:56:8a:03:
         e3:a9:1d:5e:00:cf:ab:dc:04:99:ad:a6:cf:5c:2f:89:27:50:
         a9:e6:3b:a0:b2:a4:7c:ff:e1:ad:2e:2f:63:49:bb:62:0a:88:
         ae:f5:52:79:0c:82:50:c9:0d:33:69:71:81:e6:48:ae:da:01:
         14:0a:bd:a9:5c:66:56:c5:96:6f:ec:c7:d4:ba:eb:a6:ed:27:
         c2:a9:02:6e:c4:9c:ac:98:ff:8e:ec:61:02:1f:27:27:0a:02:
         c6:6c:86:14:98:f6:1e:c3:b3:fd:5e:89:c2:32:b2:17:b4:d9:
         1a:d4:bb:2c:ce:ba:90:0e:e7:88:a8:ba:0f:fd:ba:88:6d:f3:
         63:6d:7c:53:ef:3d:b9:7b:23:d2:a2:ed:97:ba:86:74:b3:30:
         12:e8:93:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 06:25:04 2024 by rpki-client on console-fra.rpki-client.org